Skip to main content

Data Protection Information

www.convoco.co.uk

Convoco provides the Convoco website under the web address www.convoco.co.uk. The website provides information on Convoco. On our website, you also have the possibility to sign up for our email newsletter.

In context of the website and the email newsletter, personal data are processed.

Below you find information on the controller (Section A) as well as on your rights regarding the processing of your personal data (Section B).

Below you also find information on the processing of your personal data (Section C) in context of the website and the email newsletter.

 

TABLE OF CONTENTS

A. Information on the controller

B. Information on the rights of the data subjects
I. Right of access
II. Right to rectification
III. Right erasure ("Right to be forgotten")
IV. Right to restriction of processing
V. Right to data portability
VI. Right to object
VII. Right to withdraw consent
VIII. Right to logde a complaint with a supervisory authority>

C. Information on the processing of personal data
I. Informational use of the website
II. Use of the email newsletter

D. Effective date of and changes to this Data Protection Information

 

A. Information on the controller

Convoco Foundation
Brienner Str. 28, 80333 Munich, Germany
Email: info@convoco.co.uk
Tel.: +44 207 591 2749  

 

B. Information on the rights of data subjects

As a data subject, you have the following rights with regard to the processing of your personal data:

*Right of access (Article 15 of the General Data Protection Regulation)
*Right to rectification (Article 16 of the General Data Protection Regulation)
*Right to erasure (“right to be forgotten”) (Article 17 of the General Data Protection Regulation)
*Right to restriction of processing (Article 18 of the General Data Protection Regulation)
*Right to data portability (Article 20 of the General Data Protection Regulation)
*Right to object (Article 21 of the General Data Protection Regulation)
*Right to withdraw consent (Article 7 paragraph 3 of the General Data Protection Regulation)
*Right to lodge a complaint with a supervisory authority (Article 57 paragraph 1 point f of the General Data Protection Regulation)

Where applicable, you find information on any specific modalities and mechanisms which facilitate the exercise of your rights, in particular the exercise of your rights to data portability and to object, in the information on the processing of personal data in Section C of this Data Protection Information.

Below you find more detailed information on your rights with regard to the processing of your personal data:

I. Right of access

As a data subject, you have a right to obtain access and information under the conditions provided in Article 15 of the General Data Protection Regulation.

This means in particular that you have the right to obtain confirmation from us as to whether we are processing your personal data. If so, you also have the right to obtain access to the personal data and the information listed in Article 15 paragraph 1 of the General Data Protection Regulation. This includes information regarding the purposes of the processing, the categories of personal data that are being processed and the recipients or categories of recipients to whom the personal data have been or will be disclosed (points (a), (b) and (c) of Article 15 paragraph 1 of the General Data Protection Regulation).

You can find the full extent of your right to access and information in Article 15 of the General Data Protection Regulation, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

II. Right to rectification

As a data subject, you have the right to rectification under the conditions provided in Article 16 of the General Data Protection Regulation.

This means in particular that you have the right to receive from us without undue delay the rectification of inaccuracies in your personal data and completion of incomplete personal data.

You can find the full extent of your right to rectification in Article 16 of the GDPR, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

III. Right to erasure (“right to be forgotten”)

As a data subject, you have a right to erasure (“right to be forgotten”) under the conditions provided in Article 17 of the General Data Protection Regulation.

This means that you have the right to obtain from us the erasure of your personal data and we are obliged to erase your personal data without undue delay when one of the reasons listed in Article 17 paragraph 1 of the General Data Protection Regulation applies. This can be the case, for example, if personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed (point (a) of Article 17 paragraph 1 of the General Data Protection Regulation).

If we have made the personal data public and are obliged to erase it, we are also obliged, taking account of available technology and the cost of implementation, to take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of those personal data (Article 17 paragraph 2 of the General Data Protection Regulation).

The right to erasure (“right to be forgotten”) does not apply if the processing is necessary for one of the reasons listed in Article 17 paragraph 3 of the General Data Protection Regulation. This can be the case, for example, if the processing is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims (points (a) and (4) of Article 17 paragraph 3 of the General Data Protection Regulation).

You can find the full extent of your right to erasure (“right to be forgotten”) in Article 17 of the GDPR, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

IV. Right to restriction of processing

As a data subject, you have a right to restriction of processing under the conditions provided in Article 18 of the General Data Protection Regulation.

This means that you have the right to obtain from us the restriction of processing if one of the conditions provided in Article 18 paragraph 1 of the General Data Protection Regulation applies. This can be the case, for example, if you contest the accuracy of the personal data. In such a case, the restriction of processing lasts for a period that enables us to verify the accuracy of the personal data (point (a) of Article 18 paragraph 1 of the General Data Protection Regulation).

Restriction means that stored personal data are marked with the goal of restricting their future processing (Article 4 paragraph 3 of the General Data Protection Regulation).

You can find the full extent of your right to restriction of processing in Article 18 of the GDPR, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

V. Right to data portability

As a data subject, you have a right to data portability under the conditions provided in Article 20 of the General Data Protection Regulation.

This means that you generally have the right to receive your personal data with which you have provided us in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from us if the processing is based on consent pursuant to point (a) of Article 6 paragraph 1 or point (a) of Article 9 paragraph 2 of the General Data Protection Regulation or on a contract pursuant to point (b) of Article 6 paragraph 1 of the General Data Protection Regulation and the processing is carried out by automated means (Article 20 paragraph 1 of the General Data Protection Regulation).

You can find information as to whether an instance of processing is based on consent pursuant to point (a) of Article 6 paragraph 1 or point (a) of Article 9 paragraph 2 of the General Data Protection Regulation or on a contract pursuant to point (b) of Article 6 paragraph 1 of the General Data Protection Regulation in the information regarding the legal basis of processing in Section C of this Data Protection Information.

In exercising your right to data portability, you also generally have the right to have your personal data transmitted directly from us to another controller if technically feasible (Article 20 paragraph 2 of the General Data Protection Regulation).

You can find the full extent of your right to data portability in Article 20 of the General Data Protection Regulation, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

VI. Right to object

As a data subject, you have a right to object under the conditions provided in Article 21 of the General Data Protection Regulation.

At the latest in our first communication with you, we expressly inform you of your right, as a data subject, to object.

More detailed information on this is given below:

1. Right to object on grounds relating to the particular situation of the data subject

As a data subject, you have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Article 6 paragraph 1, including profiling based on those provisions.

You can find information as to whether an instance of processing is based on point (e) or (f) of Article 6 paragraph 1 of the General Data Protection Regulation in the information regarding the legal basis of processing in Section C of this Data Protection Information.

In the event of an objection relating to your particular situation, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

You can find the full extent of your right to objection in Article 21 of the General Data Protection Regulation, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

2. Right to object to direct marketing

Where your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.

You can find information as to whether and to what extent personal data are processed for direct marketing purposes in the information regarding the legal basis of processing in Section C of this Data Protection Information.

If you object to processing for direct marketing purposes, we no longer process your personal data for these purposes.

You can find the full extent of your right to objection in Article 21 of the General Data Protection Regulation, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

VII. Right to withdraw consent

Where an instance of processing is based on consent pursuant to point (a) of Article 6 paragraph 1 or point (a) of Article 9 paragraph 2 of the General Data Protection Regulation, as a data subject, you have the right, pursuant to Article 7 paragraph 3 of the General Data Protection Regulation, to withdraw your consent at any time. The withdrawal of your consent does not affect the legitimacy of the processing that occurred based on your consent until the withdrawal. We inform you of this before you grant your consent.

You can find information as to whether an instance of processing is based on point (a) of Article 6 paragraph 1 or point (a) of Article 9 paragraph 2 of the General Data Protection Regulation in the information regarding the legal basis of processing in Section C of this Data Protection Information.

VIII. Right to lodge a complaint with a supervisory authority

As a data subject, you have a right to lodge a complaint with a supervisory authority under the conditions provided in point (f) of Article 57 paragraph 1 of the General Data Protection Regulation.

 

C. Information on the processing of personal data

In the context of the website and the email newsletter, different personal data are processed for different purposes.

Insofar as we, as controller, alone or jointly with others, determine the purposes and means of the processing of personal data, you will find information below in particular on

*the personal data or categories of personal data concerned,
*the purposes for which the personal data are intended to be processed,
*the legal basis for the processing and, where the processing is based on point (f) of Article 6 paragraph 1 of the General Data Protection Regulation, the legitimate interests pursued by us or by a third party,
*the recipients or categories of recipients of the personal data, if any,
*where applicable, the fact that we intend to transfer personal data to a third country or international organisation and the existence or absence of an adequacy decision by the EU Commission, or in the case of transfers referred to in Article 46 or 47 of the General Data Protection Regulation, or the second subparagraph of Article 49 paragraph 1 of the General Data Protection Regulation, reference to the appropriate or suitable safeguards and the means by which to obtain a copy of them or where they have been made available,
*the period for which the personal data will be stored, or if that is not possible, the criteria used to determine that period,
*the existence of automated decision-making, including profiling, referred to in Article 22 paragraphs 1 and 4 of the General Data Protection Regulation and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you. [Only relevant if automated decision-making is relevant (Article 22 GDPR)]

Where we obtain your personal data from you as the data subject, you also find below information on whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the personal data and the possible consequences of failure to provide such data.

Where we do not obtain personal data from you as the data subject, you will also find below information on from which source the personal data originate, and if applicable, whether it came from publicly accessible sources.

I. Informational use of the website

During purely informational use of the website, for technical reasons certain items of information (e.g. your IP address) are sent to the server of our website via your browser which you use on your device. We process this information for a short time in order to provide the content of the website that you have accessed.

Below you will find more detailed information on this: 

1. Details on the personal data processed

Categories of personal data processed Personal data included in the categories Sources of the data Obligation to provide the data Storage period
Log data that accrue when accessing the website through the hypertext transfer protocol (secure) (HTTP(S)) for technical reasons (“HTTP data”). IP address, type and version of your internet browser, operating system used, page accessed, the page previously accessed (referrer URL), date and time of accessing the website. Users of the website as data subjects. Provision is not a statutory or contractual requirement, or a requirement necessary for entering into a contract. There is no obligation to provide personal data. In the case of failure to provide such, we cannot provide the accessed information of the website. Personal data will be stored on our webserver only for a short time at the time of accessing the website. Personal data will not be stored otherwise.

 

 

 

 

2. Details on the processing of the personal data

Purposes of the processing of the personal data Categories of personal data processed Automated decision-making Legal basis and, where applicable, legitimate interests Recipients
In order to provide the content of the website that has been accessed by the user, HTTP data are temporarily processed on our website server. HTTP data. No automated decision-making takes place. Legitimate interests (Article 6 paragraph 1 point f of the General Data Protection Regulation). Our legitimate interest is the provision of the website content that the user has accessed. Hosting provider.

 

 

 

 

3. Details on the recipients of the personal data and details on the transfer of personal data to a third country and/or international organization

Recipient Recipient’s role Recipient’s location Adequacy decision or appropriate or suitable safeguards for transfers to third countries and/or international organizations
Hosting provider: Amazon Web Services EMEA SARL, 27 Avenue des Arts 27, Brussels, 1040, Belgium (“AWS”) Processor EU -

 

II. Use of the email newsletter

On our website, you have the possibility of registering for our email newsletter. By registering for our newsletter, your email address is gathered. Additionally, for technical reasons, certain log data accrue. We process this information in order to personalize the email newsletters. Furthermore, we store this information for evidence purposes.

Below you will find more detailed information on this:

1. Details on the personal data processed

Categories of personal data processed Personal data included in the categories Sources of the data Obligation to provide the data Storage period
Data that we collect through the registration process (“subscription data”) Email address Newsletter subscribers as data subjects Provision is not a statutory or contractual requirement, or a requirement necessary for entering into a contract. There is no obligation to provide personal data. In the case of failure to provide such, we cannot provide you with the newsletter. We store these data as long as you are registered for our newsletter. We store these data for evidence purposes in case of any assertion, exercise or defence of legal claims. Moreover, we store these data for three more years after the end of the year in which you have de-registered, and in the event of any litigation until its termination.
Log data that accrue when registering or cancelling registration for the newsletter for technical reasons (“registration and de-registration data”) Date and time when you registered for the newsletter, date and time of the delivery of the message concerning the double opt-in procedure, as well as IP address of the device that is used for confirmation, date and time of the process of any de-registration from the newsletter. Newsletter subscribers as data subjects Provision is not a statutory or contractual requirement, or a requirement necessary for entering into a contract. There is no obligation to provide personal data. In the case of failure to provide such, we cannot provide you with the newsletter. We store these data as long as you are registered for our newsletter. We store these data for evidence purposes in case of any assertion, exercise or defence of legal claims. Moreover, we store these data for three more years after the end of the year in which you have de-registered, and in the event of any litigation until its termination.

 

 

2. Details on the processing of the personal data

Purposes of the processing of the personal data Categories of personal data processed Automated decision-making Legal basis and, where applicable, legitimate interests Recipients
“Double opt-in” procedure for the subscription confirmation. For this purpose, we send an email with a confirmation request to the given email address. The subscription is only effective when the subscriber confirms the email address by clicking on the confirmation link in the email. Subscription data, registration and de-registration data. No automated decision-making takes place. Legitimate interests (Article 6 paragraph 1 point f of the General Data Protection Regulation). Our legitimate interest is the legally secure documentation of your consent that you want to receive the newsletter. Email newsletter provider.
Sending the newsletter to newsletter subscribers. Subscription data, registration and de-registration data. No automated decision-making takes place. Consent (Article 6 paragraph 1 point a of the General Data Protection Regulation). Email newsletter provider.
Storage and processing of these data for evidence purposes in case of any assertion, exercise or defence of legal claims. Subscription data, registration and de-registration data. No automated decision-making takes place. Legitimate interests (Article 6 paragraph 1 point f of the General Data Protection Regulation). Our legitimate interest is assertion, exercise or defence of legal claims. Email newsletter provider.

 

 

3. Details on the recipients of the personal data and details on the transfer of personal data to a third country and/or international organization

Recipient Recipient’s role Recipient‘s location Adequacy decision or appropriate or suitable safeguards for transfers to third countries and/or international organizations

Email newsletter provider:

The Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, Georgia 30308, USA (“MailChimp”)

Processor USA

MailChimp is certified under the EU-US-Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active.

For the EU-US-Privacy Shield, there is a decision on the adequacy of the Commission: http://eur-lex.europa.eu/legal-content/DE/TXT/?uri=CELEX:32016D1250.

Email newsletter provider:

EventKingdom GmbH, Nussbaumallee 42, 14050, Berlin, Germany

Processor EU

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

D. Effective date of and changes to this Data Protection Information

The effective date of this Data Protection Information is 22.05.2018.

It may be necessary to modify this Data Protection Information due to technical developments and/or amendment of statutory or official requirements.

An up-to-date version of this Data Protection Information can be retrieved at any time at www.convoco.co.uk/data-protection-information.